Design and implement network security
Practise only this domain. 40 questions with explanations, 20 at a time.
Start this domainSample questions
- A group security office needs deny rules that every regional firewall must honor. Each region may add its own allow rules, but no regional policy may weaken the global deny list. Which firewall rule architecture meets this requirement?Hard
- You are preparing a virtual network so that a managed jump service can be deployed into it. The subnet must carry one exact name and must not host other workloads. Which name must you give that subnet?Easy
- A workload must send TCP traffic on port 8443 to a fixed partner appliance IP through Azure Firewall. The protocol is not HTTP. Which firewall rule type should you configure?Medium
- A company runs three Azure Firewalls in separate virtual hubs. Each needs the same rule collections and the same threat intelligence mode, and the security team wants one place to edit them. Which resource should hold these settings?Medium
- A team building a new workload in 2026 wants flow-level records of its virtual network traffic. NSG flow log creation is no longer available to them. What should they use?Hard